Tangled Docs

Open-source offensive security platform for conducting phishing campaigns that weaponizes iCalendar automatic event processing.

Open in GitHub


Explore the platform

Learn how to set up the environment, configure your settings, and utilize all the features available.

Go to quickstart


Technical details

Read our technical breakdown to understand the logic and mechanics behind the automatic iCalendar processing for initial access and lateral movement.

See blog post


See API Reference

Access comprehensive documentation for programmatically managing campaigns, users, and reporting.

Explore the API

curl -X POST
  'https://tangledsec.com/api/...'
  -H 'Content-Type: application/json'
  -H 'Authorization: ApiKey <key>'
  --data-raw '{
    "email": "hello@tangledsec.com",
    "opened": true
  }'

Last updated